cPanel Hosting Stuff

Cpanel backup problem.

cpanel_guru — Tue, 16 Feb 2010 05:42:44 +0000

/scripts/cpbackup is taking only one account backup and giving a log message backup is completed.

Problem is there might be a file called /etc/cpbackup-skip.conf which has all users to skip the backup.

check and remove the file, so that backup will start run for all users.

cPanel 11.25.0 provides mechanisms to prevent Cross Site Request Forgery attacks.

cpanel_guru — Fri, 23 Oct 2009 16:06:02 +0000

cPanel Security Advisory: CVE 2008-2043

October 14, 2009

Summary

cPanel 11.25.0 provides mechanisms to prevent Cross Site Request Forgery attacks.

Security Rating

This update has been rated as having an Important security rating by the cPanel Security team.

Description

All versions of cPanel prior to version 11.25.0 are vulnerable to cross site request forgery attacks. Cross-site request forgery, often abbreviated as CSRF or XSRF, exploits the trust a website has in a user’s browser. By exploiting that trust a malicious user can execute unauthorized commands on a website.

Solution

cPanel 11 users should upgrade to version 11.25.0 which contain mechanisms to prevent these types of attacks. To insure full protection, the following options in Tweak Settings are strongly recommended to be enabled:

Require security tokens for all interfaces. This will greatly improve the security of cPanel and WHM against XSRF attacks, but may break integration with other systems, login applications, billing software and third party themes.
Validate the IP addresses used in all cookie based logins. This will limit the ability of attackers who capture cPanel session cookies to use them in an exploit of the cPanel or WebHost Manager interfaces. For this setting to have maximum effectiveness, proxydomains should also be disabled.
Disable Http Authentication for cPanel/WebMail/WHM Logins (forces cookie authentication.) This will help prevent certain types of XSRF attacks that rely on cached Http Auth credentials.

In addition it is recommended the following Tweak Settings be disabled:

Add proxy VirtualHost to httpd.conf to automatically redirect unconfigured cpanel, webmail, webdisk and whm subdomains to the correct port (requires mod_rewrite and mod_proxy)
Automatically create cpanel, webmail, webdisk and whm proxy subdomain DNS entries for new accounts. When this is initially enabled it will add appropriate proxy subdomain DNS entries to all existing accounts. (Use /scripts/proxydomains to reconfigure the DNS entries manually)

Source from :

http://www.cpanel.net/2009/10/cpanel-security-advisory-cve-2008-2043.html

How to login horde and neomail directly

cpanel_guru — Mon, 12 Oct 2009 11:37:54 +0000

Here you go

http://www.linuxserverguru.com:2095/neomail/neomail.pl
http://linuxserverguru.com:2095/horde/imp/login.php

Thanks rolleyes.gif

Fix for horde addressbook add entry issue, Horde Issue

cpanel_guru — Mon, 12 Oct 2009 11:35:21 +0000

To correct the problem with the Horde address book not working correctly, you will need to SSH into your server as root, and type “mysql” to get a mysql prompt. Enter the following queries, and your problem should be fixed:

CREATE TABLE horde.turba_objects (object_id varchar(32) PRIMARY KEY,owner_id varchar(255),object_name varchar(255),object_alias varchar(32),object_email varchar(255),object_homeAddress varchar(255),object_workAddress varchar(255),object_homePhone varchar(25),object_workPhone varchar(25),object_cellPhone varchar(25),object_fax varchar(25),object_title varchar(32), object_company varchar(32),object_notes text);

insert into mysql.tables_priv values(”%”,”horde”,”horde”,”turba_objects”,”root@localhost”,now()+0,”Select,Insert,Update,Delete”,”");

flush privileges;

WHM Skins

cpanel_guru — Mon, 12 Oct 2009 11:33:03 +0000

On Cpanel Servers Skins are located at:
/usr/local/cpanel/lang/

If on any server some sking file is missing you can copy from another server like svr37 has all skins in its /usr/local/cpanel/lang/ directory and copy it to the svr without skin.
and name it spanish etc the lang. name

Then chown it to:
chown -R root.wheel languagename

Disk Quotas problem ?

cpanel_guru — Mon, 12 Oct 2009 11:31:46 +0000

Hi,
Sometimes Cpanel Server can’t update disk quotas assigned to domains and it displays Quotas = 0 or “unlimited” no matter what you do.

To resolve quotas problem you need to run following script through “SSSSS”SH

/scripts/fixquotas

After finishing you can see disk quotas whatever you set on domains.
_________________

Front Page Server Extensions

cpanel_guru — Mon, 12 Oct 2009 11:30:27 +0000

Front Page Server Extensions

The FrontPage Server Extensions are a set of programs on a Web server that allow users to author, administer, and browse Microsoft FrontPage®-extended Web sites, and to add enhanced functionality such as hit counters, search forms, and discussion webs to their sites.

The FrontPage Server Extensions for Unix use Common Gateway Interface (CGI), the near-universal Web server extension mechanism. They work with any standard Web server like apache.

When the FrontPage Server Extensions are installed on a Web server, FrontPage-extended Web authoring and administering functionality are available from any computer that has the FrontPage client, whether the computer is on the Internet or on an intranet.

You can get more info from http://office.microsoft.com/assistance/979…hostingfaq.aspx

How do i Backup and Restore my site ?

cpanel_guru — Mon, 12 Oct 2009 11:29:20 +0000

You can take site backups very easily from cpanel-

SITE BACKUP:

1)Login to cpanel

2) Click on “Backup” Icon

3) You can see lot of options on this screen.

If you want to take complete site backup including emails click on “Download Today’s Home Backup” Link and save.

SITE RESTORE:

To restore site choose “Restore a Home Backup” and browse backup file. It should be tar.gz extension file. Then hit restore button.

Your site will be restored as per backup.

How do i change MX entry for my domain ?

cpanel_guru — Mon, 12 Oct 2009 11:27:33 +0000

You can change your domain MX entry from control panel -

1) Login to cpanel

2) Click on “Mail Exchanger” icon

3) Then click on “Change MX entry”

4) Then Enter desination mail server name.

5) Hit Change button.

Note: You must enter a FQDN (Fully Qualified Domain Name) as the MX destination.

Are third party email services supported?

cpanel_guru — Mon, 12 Oct 2009 11:26:14 +0000

Any third party mail services are supported, from services such as Everyone.net or your own mail servers .

Note : Use of third party mail services results in all mail being handled by that service: no mail functions, including catchall email addresses and mailing lists, will be available for your account locally.
_________________